Release notes

The following table shows component versioning for Calico v3.11.

Use the version selector at the top-right of this page to view a different release.

v3.11.2

Release archive with Kubernetes manifests, Docker images and binaries.

16 Jan 2020

Other changes

  • Update calico/node base image to ubi8/ubi-minimal:8.1-328 to address base image CVEs node #410 (@lmm)

Bug fixes

  • Fix containerID read during host-local to Calico IPAM migration cni-plugin #829 (@sreis)
Component Version
calico/typha v3.11.2
calico/ctl v3.11.2
calico/node v3.11.2
calico/cni v3.11.2
calico/kube-controllers v3.11.2
networking-calico 3.11.2
quay.io/coreos/flannel v0.11.0
calico/dikastes v3.11.2
calico/pod2daemon-flexvol v3.11.2
calico/flannel-migration-controller v3.11.2

v3.11.1

Release archive with Kubernetes manifests, Docker images and binaries.

18 Dec 2019

Bug fixes

  • The previous version of networking-calico (3.11.0.0) causes the OpenStack neutron driver to go into a crashloop. This patch release tags networking-calico 3.11.1 at the same commit as 3.11.0.0.
Component Version
calico/typha v3.11.1
calico/ctl v3.11.1
calico/node v3.11.1
calico/cni v3.11.1
calico/kube-controllers v3.11.1
networking-calico 3.11.1
quay.io/coreos/flannel v0.11.0
calico/dikastes v3.11.1
calico/pod2daemon-flexvol v3.11.1
calico/flannel-migration-controller v3.11.1

v3.11.0

Release archive with Kubernetes manifests, Docker images and binaries.

18 Dec 2019

Support dual-stack pod IPs

Native support for both IPv4 and IPv6 is known as “dual stack” and Kubernetes has alpha-level support for this in versions 1.16 and 1.17. With this v3.11 release, Calico now supports the new Kubernetes APIs for dual stack. This allows you to use both IPv4 and IPv6 for your cluster pods. For more information on enabling dual stack, please see the howto documentation.

Calico for OpenStack enhancements

Calico for OpenStack now supports etcd authentication with etcd v3.3.11 and later. We previously supported etcd authentication with the user name being specified by a TLS client certificate, but that was realized to be insecure, and etcd authentication with HTTP/JSON now requires a different approach, for which we have added support in this release.

We’ve also added more detailed logging in various scenarios where Calico for OpenStack components see errors in working with the etcd cluster.

  • networking-calico now supports etcd v3.3.11 with authentication enabled networking-calico

Bug fixes

  • Fix Bird adding a blackhole route to the service cluster CIDR which blocks access inside the cluster confd #295 (@rafaelvanoni)
  • Fix typo resulting in bird6 never reloading confd #298 (@neiljerram)
  • Fix Felix panic when there are transiently multiple workload endpoints with the same interface name. felix #2167 (@neiljerram)
  • Don’t remove IPv6 link-local addresses felix #2173 (@neiljerram)
  • Fix panic when performing flannel to Calico migration kube-controllers #432 (@song-jiang)
  • Fix issue where IPAM block affinity was not properly calculated libcalico-go #1152 (@beautytiger)
  • Fix that namespaced network sets were not selected by namespaceSelectors libcalico-go #1158 (@robbrockbank)

Other changes

  • Don’t block if we fail to monitor services for advertisement confd #289 (@f41gh7)
  • Adding -bird-live/-bird6-live option to check for bird, bird6 and conf as part of the liveness probe. node #369 (@asincu)
  • Bird has been updated to address CVE-2019-16159 node #359 (@neiljerram)
  • calico/node now updates CNI kubeconfig when credentials change node #344 (@caseydavenport)
  • Add profiles to networkset for label inheritance felix #2171 (@robbrockbank)
  • Added backoff to the shutdown functionality when BPF dataplane doesnt seem to be working properly felix #2165 (@jayunit100)
  • Combine together ports of the same protocol to reduce number of iptables rules libcalico-go #1135 (@jackkleeman)
  • Fix validation of namespaceSelector field libcalico-go #1175 (@LittleBoy18)
  • Update to go-yaml v2.2.5 libcalico-go #1162 (@tmjd)
  • Switch amd64 node base image to ubi-minimal node #362 (@lmm)
  • Switch amd64 pod2daemon base image to ubi-minimal pod2daemon #30 (@lmm)
  • Switch amd64 cni-plugin base image to ubi-minimal cni-plugin #801 (@lmm)
  • Switch amd64 kube-controller base image to use ubi-minimal kube-controllers #431 (@lmm)
Component Version
calico/typha v3.11.0
calico/ctl v3.11.0
calico/node v3.11.0
calico/cni v3.11.0
calico/kube-controllers v3.11.0
networking-calico 3.11.0.0
quay.io/coreos/flannel v0.11.0
calico/dikastes v3.11.0
calico/pod2daemon-flexvol v3.11.0
calico/flannel-migration-controller v3.11.0